Pages: 1 2 3 4 5 6 7 8 9 10 11 ... 19 >>


Permalink 11:47:00 am, by Wayne Email , 280 words   English (US)
Categories: General

Finding & Removing the Docs WordPress Virus on Windows


A quick way to scan a bunch of WordPress installs for the Docs virus. Not sure of the real name since I can't find a reference to it on the net.

dir /s /b *.php | find "docs.php"

A more thorough search is:

findstr /sim /c:"chr(base_convert(substr" *.php

This looks for the actual code that decodes the virus.

Either method could produce some false positives so apply some comment sense before deleting files.


Removing the virus consists of checking the first line in the function.php file for each theme and removing the junk after <?php

Then delete the Docs plugin.

You will need to do this with your site disabled as the plugin will reinfect the functions.php files and the functions.php extras will reinstall the plugin.


I haven't spent too much time trying to figure out what it does exactly. However, this is what I do know.

The code added to the theme functions.php

First it checks to see if the wp-content/plugins/docs/docs.php file exists and if not it downloads a copy from

Next if the docs.php file exists it checks to see if it is activated. If not it activates it.


Registers a daily cron job which is used to update itself.

Uses the docs_wp_plugin_active_list_update action to hide itsoft from the plugin list.

Hooks the wp_head action which seems to send some data about the current request to

Ultimately it seems to fetch some content from a remote site and includes it in the page content or completely replaces the content.

One of the side effects is that it looks for a writeable tmp directory and caches data there. I found over 25,000 files in one cache folder.


Permalink 02:30:00 pm, by iclemartin Email , 48 words   English (US)
Categories: Agile

Finding the StealRat Spambot on Windows

I recently had to remove a StealRat infection from a computer. Unfortunately most of the available information is out of date and only helped somewhat.

Once I found the actual file that was the issue I developed a better command to detect any other infections:

findstr /sim /c:"'](NULL)" *.php


Permalink 10:28:41 am, by iclemartin Email , 28 words   English (US)
Categories: Misc

devZing - MantisBT Management Control Panel Released

devZing has released a new MantisBT control panel for managing those settings that are not exposed inside MantisBT giving you even more control over your install.

Read More


Permalink 09:52:49 am, by Wayne Email , 191 words   English (US)
Categories: Agile

The Origins of Yesterday's Weather

While researching a topic for my book I cam across the original paper that helped spawn the concept of Yesterday's Weather. That is the probability that amount of work you will do next week is highly likely to be the same as the amount of work you did last week.


In this study, the authors used 111 time series to examine the accuracy of various forecasting methods, particularly time-series methods. The study shows, at least for time series, why some methods achieve greater accuracy than others for different types of data. The authors offer some explanation of the seemingly conflicting conclusions of past empirical research on the accuracy of forecasting. One novel contribution of the paper is the development of regression equations expressing accuracy as a function of factors such as randomness, seasonality, trend-cycle and the number of data points describing the series. Surprisingly, the study shows that for these 111 series simpler methods perform well in comparison to the more complex and statistically sophisticated ARMA models.

Accuracy of Forecasting: An Empirical Investigation, Spyros Makridakis, Michele Hibon and Claus Moser, Journal of the Royal Statistical Society. Series A (General), Vol. 142, No. 2 (1979), pp. 97-145.



Permalink 12:12:01 pm, by Wayne Email , 260 words   English (US)
Categories: News

Bugzilla updated to 3.4.6

All Bugzilla instances have been updated to 3.4.6. You can read about all the changes here or just the differences below.

  • When doing a search that involves "not equals" or "does not contain the string" or similar "negative" search types, the search description that appears at the top of the resulting bug list will indicate that the search was of that type. (Bug 474738)
  • In Internet Explorer, users couldn't easily mark a RESOLVED DUPLICATE bug as REOPENED, due to a JavaScript error. (Bug 546719)
  • If you use a "bookmarkable template" to pre-fill forms on the bug-filing page, and you have custom fields that are only supposed to appear (or only supposed to have certain values) based on the values of other fields, those custom fields will now work properly. (Bug 538211)
  • If you have a custom field that's only supposed to appear when a bug's resolution is FIXED, it will now behave properly on the bug-editing form when a user sets the bug's status to RESOLVED. (Bug 520993)
  • If you are logged-out and using request.cgi, the Requester and Requestee fields no longer respect the usermatching parameter--they always require full usernames. (Bug 533018)
  • If you tried to do a search with too many terms (resulting in a URL that was longer than about 7000 characters), Apache would return a 500 error instead of your search results. (Bug 513989)
  • Bugzilla would sometimes lose fields from your sort order when you added new fields to your sort order. (Bug 470214)
  • The Atom format of search results would sometimes be missing the Reporter or Assignee field for some bugs. (Bug 537834)
No Hassle Open Source Project Management Hosting


Permalink 11:39:45 am, by Wayne Email , 34 words   English (US)
Categories: News

MantisBT 1.2.0 Released

MantisBT 1.2.0 is finally out. We'll be starting the upgrade evaluation process shortly. In the meantime you can still get an instant activation trial to MantisBT 1.1.8.


No Hassle Open Source Project Management Hosting



Permalink 12:53:00 pm, by Wayne Email , 19 words   English (US)
Categories: News

devZing - No Hassel Open Source Project Management Hosting

The next revision of our open source project management hosting service is now live -

try bugzilla » try mantisbt »


Permalink 10:14:03 am, by Wayne Email , 22 words   English (US)
Categories: News

Bugzilla updated to 3.4.5

All Bugzilla instances have been updated to 3.4.5 in order to resolve a security issue announced yesterday.

You can read the release announcement here.


1 2 3 4 5 6 7 8 9 10 11 ... 19 >>

October 2015
Mon Tue Wed Thu Fri Sat Sun
 << <   > >>
      1 2 3 4
5 6 7 8 9 10 11
12 13 14 15 16 17 18
19 20 21 22 23 24 25
26 27 28 29 30 31  


XML Feeds

Real Time Web Analytics
powered by b2evolution CMS